Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
File:                     ySTN5BVFl0tvV4MubGA7zIlm2eA.mft (raw, json)
Hash identifier:          zSjvozlcy2/PyRtNf/IqaiNdMzhO50z15sssWJuwSKY=
Subject key identifier:   4C:36:CC:99:C9:59:90:71:BF:7A:01:0D:E2:54:3C:E0:5A:E4:C5:83
Authority key identifier: C9:24:CD:E4:15:45:97:4B:6F:57:83:2E:6C:60:3B:CC:89:66:D9:E0
Certificate issuer:       /CN=A91F2DDD/serialNumber=C924CDE41545974B6F57832E6C603BCC8966D9E0
Certificate serial:       03DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
Manifest number:          12E5
Signing time:             Fri 12 Jun 2026 17:33:56 +0000
Manifest this update:     Fri 12 Jun 2026 17:33:55 +0000
Manifest next update:     Fri 19 Jun 2026 17:33:55 +0000
Files and hashes:         1: ySTN5BVFl0tvV4MubGA7zIlm2eA.crl (hash: xaiRCSdPOXvmQHT8b4rpu7PTjK0pkYvQJyhHC56znqM=)
                          2: 2FBEB0B0D5B011EC90A8A031C4F9AE02.roa (hash: +CMTAtAhA5A3bcW+qweztRhJOEGADprPEZzn/dd78sw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DDD, serialNumber=C924CDE41545974B6F57832E6C603BCC8966D9E0
        Validity
            Not Before: Jun 12 17:33:55 2026 GMT
            Not After : Jun 19 17:33:55 2026 GMT
        Subject: CN=6a2c4304-7967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a2:ca:92:82:4f:7f:e7:0a:32:58:8e:5b:51:
                    39:81:c4:4f:50:12:a0:70:d3:df:ae:e7:77:c1:ee:
                    75:69:74:1e:01:4d:6d:29:df:27:dd:96:39:cd:98:
                    fb:01:97:4a:2d:4c:9d:4a:3e:a2:2c:45:6e:5f:5e:
                    ae:ce:cc:7a:b7:a3:f7:46:ff:9c:86:ca:75:9d:eb:
                    5d:42:da:3a:03:4c:dd:19:6e:2b:ca:62:62:9b:4c:
                    46:d9:69:55:2c:69:bf:22:41:10:12:d3:71:95:d4:
                    40:d9:00:53:06:0b:f1:64:bf:2d:2a:43:20:d9:98:
                    a8:85:bd:d3:f2:f8:02:78:6f:d3:74:00:3b:9c:30:
                    91:6d:f9:9f:fe:72:10:ff:d6:b4:f1:dc:a5:3c:63:
                    b8:7d:e8:29:19:d5:37:c7:6b:3b:86:07:fe:18:a6:
                    c0:65:05:37:4a:71:a3:75:e1:47:aa:2c:6a:42:d5:
                    ed:4d:8d:d4:36:51:33:ee:da:27:f5:69:e1:11:39:
                    b5:61:1a:e3:02:05:cc:9a:51:90:6b:09:45:63:33:
                    16:38:78:c2:62:1d:2e:22:bb:5f:43:36:61:ff:f2:
                    c3:10:a2:34:e9:dc:eb:5a:e5:4e:2d:48:d6:0a:89:
                    4c:40:a0:89:e7:2a:eb:7d:70:26:19:83:ca:f5:e8:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:36:CC:99:C9:59:90:71:BF:7A:01:0D:E2:54:3C:E0:5A:E4:C5:83
            X509v3 Authority Key Identifier:
                keyid:C9:24:CD:E4:15:45:97:4B:6F:57:83:2E:6C:60:3B:CC:89:66:D9:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:bb:b4:d9:f3:2c:d0:3e:34:65:cc:d7:46:66:f8:f2:e3:ee:
         a0:92:94:33:0a:8e:c5:77:9b:07:a0:e8:b9:7b:4d:8a:b9:8e:
         8d:b2:7a:ca:ec:80:6d:b3:e9:47:f8:d8:08:35:7a:01:a0:02:
         e1:65:a2:94:71:69:f6:d3:24:11:00:c1:a8:49:b5:14:13:43:
         6b:e7:55:ca:aa:4d:f2:0e:ba:1e:42:76:03:db:2b:01:f6:44:
         ca:ca:5f:01:d2:f8:d4:4d:9b:45:26:75:51:9e:a3:8e:80:43:
         5f:aa:12:be:6d:ba:c0:90:ce:70:1f:87:28:07:fe:be:66:68:
         ca:2f:d2:fd:17:9d:9e:05:13:a2:85:2a:96:ef:06:00:9a:ae:
         2e:81:02:25:db:8b:c8:dc:e7:b6:a2:3b:68:83:9a:f5:27:41:
         a3:aa:c5:74:de:85:58:6d:11:e5:90:6a:7d:0e:d5:c0:7b:7c:
         1f:cb:e4:81:d8:2d:ea:97:c9:76:f0:c9:10:1f:57:6f:ef:30:
         7b:a0:92:da:43:83:17:c5:f3:de:8a:13:9d:90:37:f7:73:0e:
         2e:9c:54:31:ad:16:17:02:26:9c:f1:ec:21:ef:ca:3d:7c:9c:
         56:17:36:a5:f4:9f:68:54:f8:1a:d0:78:5c:7e:62:25:b5:de:
         5a:ff:7b:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJEREQxMTAvBgNVBAUTKEM5MjRDREU0MTU0NTk3NEI2RjU3ODMyRTZDNjAzQkND
ODk2NkQ5RTAwHhcNMjYwNjEyMTczMzU1WhcNMjYwNjE5MTczMzU1WjAYMRYwFAYD
VQQDEw02YTJjNDMwNC03OTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl6LKkoJPf+cKMliOW1E5gcRPUBKgcNPfrud3we51aXQeAU1tKd8n3ZY5zZj7
AZdKLUydSj6iLEVuX16uzsx6t6P3Rv+chsp1netdQto6A0zdGW4rymJim0xG2WlV
LGm/IkEQEtNxldRA2QBTBgvxZL8tKkMg2Ziohb3T8vgCeG/TdAA7nDCRbfmf/nIQ
/9a08dylPGO4fegpGdU3x2s7hgf+GKbAZQU3SnGjdeFHqixqQtXtTY3UNlEz7ton
9WnhETm1YRrjAgXMmlGQawlFYzMWOHjCYh0uIrtfQzZh//LDEKI06dzrWuVOLUjW
ColMQKCJ5yrrfXAmGYPK9ehtFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEw2zJnJ
WZBxv3oBDeJUPOBa5MWDMB8GA1UdIwQYMBaAFMkkzeQVRZdLb1eDLmxgO8yJZtng
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRERC9CNEEyODM2MjlF
MUIxMUU5OEUxRTRFNUVDNEY5QUUwMi95U1RONUJWRmwwdHZWNE11YkdBN3pJbG0y
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lTVE41QlZGbDB0dlY0TXViR0E3eklsbTJlQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkRERC9CNEEyODM2MjlFMUIxMUU5OEUxRTRFNUVDNEY5QUUwMi95U1RONUJWRmww
dHZWNE11YkdBN3pJbG0yZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgbu02fMs0D40ZczXRmb48uPuoJKUMwqOxXebB6DouXtNirmOjbJ6yuyAbbPp
R/jYCDV6AaAC4WWilHFp9tMkEQDBqEm1FBNDa+dVyqpN8g66HkJ2A9srAfZEyspf
AdL41E2bRSZ1UZ6jjoBDX6oSvm26wJDOcB+HKAf+vmZoyi/S/RedngUTooUqlu8G
AJquLoECJduLyNzntqI7aIOa9SdBo6rFdN6FWG0R5ZBqfQ7VwHt8H8vkgdgt6pfJ
dvDJEB9Xb+8we6CS2kODF8Xz3ooTnZA393MOLpxUMa0WFwImnPHsIe/KPXycVhc2
pfSfaFT4GtB4XH5iJbXeWv970w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:52:42 2026 by rpki-client